OpenWorker 发布新版本,内置面向安全流程的智能体
OpenWorker -- an open source agent that doesn't just chat but completes tasks on your laptop -- just released a new version with many features for security work
开源智能体 OpenWorker 发布新版本,内置三类网络安全智能体,分别用于扫描代码漏洞、扫描依赖中的供应链注入以及检查云安全配置中的攻击面,让开发者在部署前完成更多安全工作。OpenWorker 的 harness 完全开源,安全团队可审计其是否会把代码和数据外传;模型可自选,既能完全本地运行开放权重模型,也可使用 ChatGPT 订阅、Ox Alpha 等预览模型或任意 API key 接入。Andrew Ng 表示该工具与 @rohitcprasad 合作推进。
推荐理由
AI 评分 57
OpenWorker 新版本把安全扫描能力做成内置智能体,并强调 harness 开源可审计与本地模型选项,读者可据此判断开源智能体在安全场景的落地方式。
主题
正文
当前显示原文,中文全文译文尚未就绪。
OpenWorker -- an open source agent that doesn't just chat but completes tasks on your laptop -- just released a new version with many features for security workflows.
After our initial release, many users found it especially useful for cybersecurity. Attackers are already using AI; OpenWorker is committed to giving defenders the same leverage. Running an agent requires both (i) A model and (ii) A harness (the software around the model). Because the OpenWorker harness is fully open source, security teams can audit it to make sure we haven't built any backdoors that exfiltrate your code and data to some company or even a foreign adversary.
OpenWorker now comes with built-in cybersecurity agents for (i) Scanning your code for vulnerabilities. (ii) Scanning dependencies for supply chain injections. (iii) Checking your cloud security configuration for attack surfaces. This enables developers to do much more security work before deployment (part of what's called the "shift left" movement).
You choose the model: you can run open weight models fully locally so sensitive code never leaves your machine. This helps with legitimate security work (like reproducing a known exploit to defend against it) that can trigger refusals in leading closed models. Or use your ChatGPT subscription, or stealth preview models like Ox Alpha, or any model via API key.
Thanks also to all the open source contributors!
Join work with @rohitcprasad so please follow him too to get more frequent updates.